7. Indawo yokuKhangela yokuQala R80.20. Ulawulo lokufikelela

Wamkelekile kwiSifundo 7, apho siyakuqala ukusebenza ngemigaqo-nkqubo yokhuseleko. Namhlanje siza kufaka umgaqo-nkqubo kwisango lethu okokuqala, oko kukuthi. Ekugqibeleni siya kwenza "ukufaka ipolisi". Emva koku, itrafikhi iya kukwazi ukudlula kwisango!
Ngokubanzi, imigaqo-nkqubo, ukusuka kwindawo yokujonga i-Check Point, ingcamango ebanzi ngokufanelekileyo. Imigaqo-nkqubo yoKhuseleko inokohlulwa ibe ziindidi ezi-3:

1. Ulawulo lokufikelela. Oku kubandakanya iiblade ezifana: I-Firewall, uLawulo lweSicelo, uHlelo lwe-URL, ulwazi loMxholo, uFikelelo lweMobile, i-VPN. Ezo. yonke into enxulumene nokuvumela okanye ukuthintela itrafikhi.
2. UThintelo Lwezoyikiso. Amacwecwe asetyenziswa apha: IPS, Anti-Virus, Anti-Bot, Threat Emulation, Threat Extraction. Ezo. imisebenzi ejonga umxholo wetrafikhi okanye umxholo osele udlule kuLawulo lokuFikelela.
3. Ukhuseleko lweDesktop. Ezi sele ziyimigaqo-nkqubo yokulawula ii-arhente ze-Endpoint (o.k.t. ukukhusela iindawo zokusebenza). Ngokomgaqo, asiyi kuchukumisa kwesi sihloko kwikhosi.

Kwesi sifundo siza kuqala ukuthetha ngemigaqo-nkqubo yoLawulo lokuFikelela.

Ukuqulunqwa koLawulo lokuFikelela

Ulawulo loFikelelo ngumgaqo-nkqubo wokuqala ekufuneka ufakwe kwisango lokungena. Ngaphandle kwalo mgaqo-nkqubo, ezinye (uThintelo lweSisongelo, uKhuseleko lweDesktop) aziyi kufakwa ngokulula. Njengoko bekutshiwo ngaphambili, imigaqo-nkqubo yoLawulo lokuFikelela ibandakanya iiblade ezininzi ngaxeshanye:

• I-Firewall;
• Isicelo & Uhluzo lwe-URL;
• Ulwazi ngomxholo;
• Ufikelelo lweMobile;
• NAT

Ukuqala, siza kujonga nje enye-Firewall.

Amanyathelo amane okuqwalasela iFirewall

Ukufakela ipolisi esangweni, KUFUNEKA sigqibezele la manyathelo alandelayo:

1. Chaza ujongano lwesango olufanelekileyo indawo yokhuseleko (ingaba Ngaphakathi, Ngaphandle, i-DMZ, njl.)
2. Yenza ngokwezifiso Anti-Spoofing;
3. Yenza izinto zenethiwekhi (Uthungelwano, Iinginginya, iiSeva njl.) Oku kubalulekile! Njengoko besenditshilo, indawo yokuHlola isebenza kuphela ngezinto. Awuyi kuba nakho ukufaka ngokulula idilesi ye-IP kuluhlu lofikelelo;
4. Yenza Uluhlu lokufikelela-s (ubuncinci enye).

Ngaphandle kwezi setingi, imigaqo-nkqubo ayizukufakwa!

Isifundo sevidiyo

Njengesiqhelo, siqhoboshela isifundo sevidiyo apho siya kwenza inkqubo yokuseta esisiseko yoFikelelo-loLawulo kwaye senze uluhlu olucetyiswayo lokufikelela.

Hlala ubukele ngakumbi kwaye uzibandakanye nathi Isiteshi se-YouTube 🙂

umthombo: www.habr.com